Only block extensions for direct file access
Update ffmpeg